Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/EnXexW8zKrP2QHIFl-DxsOV3KPg.roa
File: EnXexW8zKrP2QHIFl-DxsOV3KPg.roa (raw, json)
Hash identifier: ziJyoXsSLq8sNz/WmQlhJ6yGSTWCP4P+NLmiNAnmQ9o=
Subject key identifier: 12:75:DE:C5:6F:33:2A:B3:F6:40:72:05:97:E0:F1:B0:E5:77:28:F8
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0184D24F439D5BF89202D575AE0FEC9A1519
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/EnXexW8zKrP2QHIFl-DxsOV3KPg.roa
Signing time: Fri 02 Dec 2022 10:08:40 +0000
ROA not before: Fri 02 Dec 2022 10:08:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 86.62.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:4f:43:9d:5b:f8:92:02:d5:75:ae:0f:ec:9a:15:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Dec 2 10:08:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1275dec56f332ab3f640720597e0f1b0e57728f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:05:4a:eb:18:ab:a7:c0:02:7c:cc:47:6d:
d3:60:60:9f:20:1d:b1:14:f5:8b:98:0c:eb:d3:e9:
83:82:c8:50:5c:96:af:fa:6a:46:80:12:70:21:54:
a2:4b:33:1b:48:5e:3b:c8:45:af:a2:eb:41:57:d6:
35:f6:59:22:50:a2:27:b8:55:ea:67:3d:71:67:cf:
a6:b7:19:c2:cc:ed:67:7c:0d:cb:e6:04:a8:1e:15:
d7:7d:79:32:32:9e:f5:2e:7c:29:4a:85:79:62:49:
d9:9a:2e:8f:11:56:8f:88:02:66:04:f7:c7:8c:c8:
32:0c:6b:42:e5:02:9f:a9:31:bd:ef:a9:4c:0b:8e:
ac:6d:d2:21:7f:e8:0c:de:38:c1:8d:2d:79:96:e4:
27:3f:1c:76:49:3e:0f:39:bd:10:8d:36:74:c2:82:
b1:2b:40:9c:6e:08:e2:1f:44:73:02:38:61:a2:38:
bb:fb:99:88:9d:3b:1b:1e:66:9f:4e:17:f8:b7:fc:
4a:44:8f:4a:ed:17:30:c1:e5:af:c7:39:d4:86:d9:
f3:93:31:70:16:77:07:30:92:05:19:0c:41:0b:73:
a7:ce:9c:8a:f6:a1:95:d0:0f:a6:bb:ac:f8:51:8d:
1f:57:34:b9:ce:7a:c0:54:a7:49:e9:3f:7b:41:24:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:75:DE:C5:6F:33:2A:B3:F6:40:72:05:97:E0:F1:B0:E5:77:28:F8
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/EnXexW8zKrP2QHIFl-DxsOV3KPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.28.0/24
Signature Algorithm: sha256WithRSAEncryption
92:78:85:dc:ec:74:dd:1c:b9:ed:cc:b7:ae:33:99:45:7f:5c:
85:3d:cd:dc:5a:5a:2e:73:33:d6:fa:c1:a2:24:b1:1b:31:c2:
b5:88:5c:c1:1b:ef:9b:ea:ec:f9:8c:7d:18:ae:77:95:53:2a:
b6:c8:da:cb:b3:78:70:81:b5:f8:41:1e:8f:e4:97:f0:aa:6f:
bb:61:19:3d:7f:ea:15:a8:cd:c7:9a:84:0d:81:c8:b4:0f:6e:
48:e4:6d:9a:05:f8:e0:1c:13:88:53:fa:65:b3:94:92:a3:7f:
51:fd:62:8d:5b:32:b3:ee:a5:59:93:00:51:5f:9a:63:97:53:
47:b1:a6:ac:53:88:c8:1b:22:f7:d6:52:48:8f:64:03:04:a4:
1d:f9:34:28:7a:af:3c:c4:9c:0b:c1:28:c9:17:3b:b3:d3:b6:
8f:a9:20:fb:74:66:92:35:dc:c1:a3:ba:22:51:42:32:15:8a:
69:ae:56:56:b2:36:9f:2a:27:c0:2d:5b:12:63:2b:be:f7:b7:
96:d4:94:1f:39:cd:bd:35:3b:57:e6:79:d7:4d:8d:61:4a:ce:
d7:6e:dc:a8:58:e8:5a:51:39:d7:95:09:57:2e:04:38:9f:bd:
2c:e8:dc:56:31:37:05:d8:87:64:db:15:04:af:8d:dd:a0:d5:
44:e3:be:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:50 2023 by rpki-client on console-ams.rpki-client.org